Skip to content
Noroxi

sitebar records

8 published records for vendor sitebar.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
1
With a fix record
87.5%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    8 records
    • CVE-2007-5491
      37Monitor

      Directory traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to chmod arb

      CriticalCVSS 9.0No exploitEPSS 2%

      sitebar · sitebarOct 17, 2007

    • CVE-2007-2088
      30Monitor

      Multiple PHP remote file inclusion vulnerabilities in Sitebar 3.3.5 and earlier allow remote attackers to execute arbitrary PHP code via a U

      HighCVSS 7.5No exploitEPSS 1%

      sitebar · sitebarApr 18, 2007

    • CVE-2007-5694
      29Monitor

      Absolute path traversal vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to read

      MediumCVSS 6.8Proof of conceptEPSS 7%

      sitebar · sitebarOct 29, 2007

    • CVE-2007-5693
      26Monitor

      Eval injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute arbitr

      MediumCVSS 6.0Proof of conceptEPSS 5%

      sitebar · sitebarOct 29, 2007

    • CVE-2007-5695
      26Monitor

      Open redirect vulnerability in command.php in SiteBar 3.3.8 allows remote attackers to redirect users to arbitrary web sites via a URL in th

      MediumCVSS 6.4No exploitEPSS 2%

      sitebar · sitebarOct 29, 2007

    • CVE-2007-5692
      18Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in SiteBar 3.3.8 allow remote attackers to inject arbitrary web script or HTML via (1) t

      MediumCVSS 4.3Proof of conceptEPSS 4%

      sitebar · sitebarOct 29, 2007

    • CVE-2007-5492
      18Monitor

      Static code injection vulnerability in the translation module (translator.php) in SiteBar 3.3.8 allows remote authenticated users to execute

      MediumCVSS 4.6No exploitEPSS 1%

      sitebar · sitebarOct 17, 2007

    • CVE-2006-3320
      11Monitor

      Cross-site scripting (XSS) vulnerability in command.php in SiteBar 3.3.8 and earlier allows remote attackers to inject arbitrary web script

      LowCVSS 2.6No exploitEPSS 2%

      sitebar · sitebarJun 29, 2006